Description
RabidHamster R4 v1.25 contains a stack-based buffer overflow vulnerability due to unsafe use of sprintf() when logging malformed HTTP requests. A remote attacker can exploit this flaw by sending a specially crafted URI, resulting in arbitrary code execution under the context of the web server process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| RabidHamster | R4 Embedded Server | 1.25 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
RabidHamster R4 Log Entry sprintf() Buffer Overflow
exploit/windows/http/rabidhamster_r4_log
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/rabidhamster_r4_log.rb exploit
- https://www.exploit-db.com/exploits/18929 exploit
- http://aluigi.altervista.org/adv/r4_1-adv.txt technical-description exploit
- https://advisories.checkpoint.com/defense/advisories/public/2013/cpai-07-jan405.html third-party-advisory
- https://www.rabidhamster.org/R4/download.php product
- https://www.vulncheck.com/advisories/rabidhamster-r4-log-entry-buffer-overflow third-party-advisory